47436 matches found
Grafana < 11.6.2 Improper Input Validation
According to its self-reported version, the Grafana install hosted on the remote host is prior to 11.6.2. It is, therefore, affected by an improper input validation. - An excessively long dashboard title or panel name will cause Chromium browsers to become unresponsive due to Improper Input...
Important: Red Hat Security Advisory: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...
CVE-2025-58584 Plain Text Transmission of Username and Password in the URL
In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server logs, browser histories or proxy servers. As a result, there is a high risk that this sensitive data will be disclosed unintentionally...
EUVD-2025-32511
In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server logs, browser histories or proxy servers. As a result, there is a high risk that this sensitive data will be disclosed unintentionally...
[SECURITY] Fedora 42 Update: jupyterlab-4.4.9-1.fc42
JupyterLab is the next-generation user interface for Project Jupyter offering all the familiar building blocks of the classic Jupyter Notebook notebook, terminal, text editor, file browser, rich outputs, etc. in a flexible and powerful user interface...
CVE-2025-61197
CVE-2025-61197 affects Orban Optimod family (5950, 5950HD, 5750, 5750HD, Trio) with version 1.0.0.33 up to 2.5.26. The root cause is that the application stores user privilege/role information in the client-side browser storage, enabling a remote attacker to escalate privileges. CVSS data in the ...
PT-2025-40897
Name of the Vulnerable Software and Affected Versions Orban Optimod 5950 Orban Optimod 5950HD Orban Optimod 5750 Orban Optimod 5750HD Orban Optimod Trio versions 1.0.0.33 through 2.5.26 Description A flaw exists that allows a remote attacker to escalate privileges. The application stores user...
CVE-2025-61197
An issue in Orban Optimod 5950, Optimod 5950HD, Optimod 5750, Optimod 5750HD, Optimod Trio Optimod version 1.0.0.33 - System version 2.5.26 allows a remote attacker to escalate privileges via the application stores user privilege/role information in client-side browser storage...
Orban多款产品 安全漏洞
Orban Optimod 5950 and others are a broadcast audio processor from Orban USA. A security vulnerability exists in various Orban products that stems from an application storing user privilege or role information in the client browser storage, which could lead to elevated privileges. The following...
RockyLinux 10 : firefox (RLSA-2025:8125)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:8125 advisory. firefox: Out-of-bounds access when resolving Promise objects CVE-2025-4918 firefox: Out-of-bounds access when optimizing linear sums CVE-2025-4919 Tenab...
RHEL 9 : firefox (RHSA-2025:17374)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17374 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...
[SECURITY] Fedora 43 Update: firefox-143.0.3-1.fc43
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
CVE-2025-10502
Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. Chromium security severity: High...
CometJacking: One Click Can Turn Perplexity's Comet AI Browser Into a Data Thief
Cybersecurity researchers have disclosed details of a new attack called CometJacking targeting Perplexity's agentic AI browser Comet by embedding malicious prompts within a seemingly innocuous link to siphon sensitive data, including from connected services, like email and calendar. The sneaky...
EUVD-2024-46863
Malicious code in bioql PyPI...
EUVD-2023-40808
Malicious code in bioql PyPI...
EUVD-2022-27297
Malicious code in bioql PyPI...
EUVD-2025-26496
Malicious code in bioql PyPI...